Cyber Security Risk & Controls Lead/Senior Associate Director, Cybersecurity Specialist

Role Overview

In this role, you will

• Support cybersecurity across UK RBW entities through risk management, regulatory compliance, and business alignment.
• Translate complex security concepts into actionable guidance for business growth within risk appetite.
• Maintain risk and control standards with business and technology teams using an engineering-led approach.
• Support cybersecurity strategy delivery and continuous improvement of controls, processes, and security technologies.
• Manage cybersecurity risk, governance, and compliance activities across NIST, ISO 27001, GDPR, and FCA requirements.
• Coordinate audits and assessments, maintain evidence, and report to senior management.
• Lead stakeholder engagement, incident management, and security culture initiatives.
• Coordinate major incident responses under UK RBW CISO direction.
• Develop team capability and contribute to policies, standards, and awareness programs.

Requirements

• Practical engineering experience designing and implementing security controls and tooling, including exposure to AI-enabled solutions.
• Strong cybersecurity, technology, and risk management knowledge.
• Familiarity with NIST, ISO 27001, GDPR, and FCA requirements.
• Experience managing cybersecurity issues and coordinating with senior stakeholders and risk or compliance partners.
• Experience leading junior team members and delivering cybersecurity initiatives.
• At least 8 years of experience in security strategy, team and program leadership, risk methodologies, and engineering practices.
• Relevant degree or equivalent experience and one or more relevant professional certifications or progress toward them.
• Clear communication and senior stakeholder influence skills.
• Willingness to travel as required.

Leadership and Capabilities

• Commercially aware decision-maker who translates business and market insight into practical priorities.
• Action-oriented leader who coordinates across teams and delivers outcomes through others.
• Influential and accountable in complex or ambiguous situations.

Work Location

• The role is based in India.
• The description does not specify whether the position is onsite, hybrid, or remote.

About HSBC